Lucene search
K

6546 matches found

Rockylinux
Rockylinux
added 2023/04/26 3:28 p.m.12 views

.NET 6.0 bug fix update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a managed-software framework. It implements a subset of the .NET...

6.5AI score
Exploits0
Microsoft KB
Microsoft KB
added 2023/04/25 12:0 a.m.5 views

April 25, 2023-KB5025367 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

April 25, 2023-KB5025367 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 Release Date: April 25, 2023 Version: .NET Framework 3.5, 4.8 and 4.8.1 Summary This article describes the Cumulative Update for 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2...

6.5AI score
Exploits0
UbuntuCve
UbuntuCve
added 2023/04/19 11:15 p.m.28 views

CVE-2023-2166

A null pointer dereference issue was found in can protocol in net/can/afcan.c in the Linux before Linux. mlpriv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service...

5.5CVSS6.7AI score0.00018EPSS
Exploits0References3
Microsoft Security Update
Microsoft Security Update
added 2023/03/29 9:0 p.m.11 views

2023-02 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 20H2 for ARM64 (KB5022727)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.4AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2023/03/29 9:0 p.m.10 views

2023-02 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 22H2 for ARM64 (KB5022729)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.4AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2023/03/29 9:0 p.m.11 views

2023-02 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 (KB5022728)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.4AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2023/03/29 9:0 p.m.23 views

2023-02 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 20H2 for x64 (KB5022727)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.4AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2023/03/29 9:0 p.m.18 views

2023-02 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 20H2 (KB5022727)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

6.4AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/08 8:18 p.m.42 views

Security Bulletin: A vulnerability in Microsoft .NET Framework may affect IBM Robotic Process Automation and result in an exposure of sensitive information (CVE-2022-41064)

Summary There is a vulnerability in .NET Framework components used by IBM Robotic Process Automation as part of it's infrastructure, which may allow a remote authenticated attacker to obtain sensitive information. CVE-2022-41064. This bulletin identifies the security fixes to apply to address thi...

5.8CVSS5.5AI score0.00189EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2023/02/26 12:0 a.m.22 views

Debian: Security Advisory (DLA-3343-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.9AI score0.01366EPSS
Exploits0References4
Debian
Debian
added 2023/02/25 9:42 a.m.30 views

[SECURITY] [DLA 3343-1] mono security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3343-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 24, 2023 https://wiki.debian.org/LTS -...

8.8CVSS9AI score0.01366EPSS
Exploits0
Veracode
Veracode
added 2023/02/23 2:49 a.m.31 views

Arbitrary Code Execution

MongoDB.Bson is vulnerable to Arbitrary Code Execution. The vulnerability exists because the library does not properly filter AllowedTypes when deserializing an object, allowing a privileged attacker to inject and execute malicious code through the ObjectSerializer in specific situtations. The...

7.2CVSS6.9AI score0.01339EPSS
Exploits0References5Affected Software1
MongoDB
MongoDB
added 2023/02/21 7:39 p.m.323 views

Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

7.2CVSS6.7AI score0.01339EPSS
Exploits0References2Affected Software2
OSV
OSV
added 2023/02/21 7:15 p.m.13 views

CVE-2022-48282

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

7.2CVSS7AI score
Exploits0References3
NVD
NVD
added 2023/02/21 7:15 p.m.7 views

CVE-2022-48282

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

7.2CVSS6.7AI score0.01339EPSS
Exploits0References3
Prion
Prion
added 2023/02/21 7:15 p.m.32 views

Design/Logic Flaw

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

5.8CVSS7AI score0.01339EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/02/21 6:35 p.m.361 views

CVE-2022-48282

CVE-2022-48282 affects MongoDB .NET/C# Driver up to version 2.18.0. Under very specific conditions, a privileged user can cause arbitrary code execution via deserialization, involving applications written in C# running on Windows with the full .NET Framework, taking user data, and serializing wit...

7.2CVSS6.7AI score0.01339EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/21 6:35 p.m.7 views

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

6.6CVSS7AI score0.01339EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/02/21 6:35 p.m.24 views

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

6.6CVSS7.2AI score0.01339EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/02/17 12:0 a.m.317 views

Security Updates for Microsoft .NET Framework (February 2023)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A denial of service DoS vulnerability. CVE-2023-21722 - A remote code execution vulnerability. CVE-2023-21808 %NASLMINLEVEL 80900 C...

7.8CVSS7.9AI score0.01277EPSS
Exploits0References35
Rows per page
Query Builder